��J� ���$��O`R�UQO;���x uX��E���hԌc��?V� ���?���T�?��I�[ڂ-�=�}f�AY�e��Ԣt���ڤ%h_� �H�s(�� v ����dnuR��=����H�� ds1�&Kd4Q��R��R�X��ҡA�f� ���Q�/y���[���yMI%ZW�A6&�z��1ǡ�8���-� �Ԝ �����m:=���zE��7�+�#�,,rtV7�<B�Ũ���oⅰ������#0�����܀)z�,��(�d�Wf�ho��N7҅����"�:���� ��v�WE"[FHɍ����2��5�Ύ6JWj�ьЀގ��ڢf9,�(��2��V��+�%�)m�djc�~dh�R��IH��o�tX��_�wm v7���G1��.$$e��~�!�>�-4���CR�*�)'��dB6?�,�9��0��zаtP�� A���$[�ڐ��� ������ɧĔܿ�;�Jq�����N\Ȝ� ENoz�Y���`����S�����J����O�_Ns�#�V���A$�02R���a�������X|xg:&�Xe1ɯ �L@b�-V�8s@B��%�N���ߨR��'�Gy�!�%�&MY����ޜ��'ݍ��QU�k�� ��f78m��;v����(�?��*��zl��+�*ΘBg�������Z�w2� �mߴ1���B-�ڻ �mZ���[,q�_Wq�F��}S*��<xai�v��7�8KҢ̆{msn)��c�����%S=~m����� ���v�mn��8ƙt�H��t,m-������#�v�j MMZ��w-N{B�[*(!�B��(zL%���I�1?�y5ByO�')�];W���t��*��iox=���N���mSX�_�Q�L18!�ч�L>�}�{�cאָ6��k�㘽n#B���uT}�����s��9��९���@��HЈ9ι�hH��E�������_fh9�F���S� m�l����b�Z�iv���} +�_�NZ>��6��Rم� �+t�7�Zϒ5���®O�}����X�"}`CL�6T>��15eV'�DQ��4#�s[]��U"g����k�me�Nlg�酇_1�\��rg�=/qء$�wߨ�0�s��(����)��ޅA��d�6�X�9K��h,j�1�`0��va���*�'4 ���6�.�P�!�Lr����{{jj�yl�.��7 N����0�:'��\ʒy���S�����zԇ�p�}������z?@��H�סٹ�Ba�n%��7;��;8�9��w��./��RG��w�#��H����{N��ϲ��z��,8����� �3�#<��/�!J�<� @|P(��k��?������)v��t��9h�yƧ �@v���P�V?��v������e.S�\��3��5�w�`w��D˝I4���/��:s��ø��`��$s�V�D���!̩ٟ����e�L��S 5���E�h� `ؔdP�����?�D˱�CG�7(2Ζ�!� ��u6����@�f��ծ�&b^(*'U8�J8y��3[��ûR�4s闌�p OI����ㇽ��$�Gb�9nF}ee�|���C�B,��[�K�Mql~g�_�K]i���������K�F#���Ly��e��;NJB���b��(J�9����4�l���{ˈ9ih*������5c�,����+�C�f���81�Ⳮ�.�xVݜ��-?HV�^�t�+��W����Wn��~@~�fQ�2t���o��p����b9遑�-��(q��1�1��d<�����6c7lj4�KNOĭ�7���TSiy��F�T�j9�Ԟ�x�[�y��_(�&��������C�k�B�PE�Ջ�\�ǯ���FB�(��_:ҏ�Wña}��� �#����f�59c�6J��;���}z�] {Ɂ0������o1���!�������1���i���©?x��r�;4����'��%$h�� ��Y�@�ﹴ�E{�?���tE�?H"�bl�� �V�P�n(7Ф)s��AXa�̀\����ݞw&cR��ӂ�0�̋��:3*+�9�tզ����Z�$���d�&���ċwꝓWY�qM�Q�g#b��g(��+���S>�Rc�'@�p�����%�@״��sG���m���aO3�#b� H�U0b�zwW �Zd�;�<=�?7P�����(�6�<�����\c����Q�CA����!/1��l���,�+�>�C����8������m�w�m�V����/�y�^�,��3�J�&_��p���*ȏ��2����%��$.EWʂ�XߧzAk��ҭ��n�Tw5�i 6�z=�b~�aU7�ϋ��0������Le��e�@-Y�pB(��}�e4E�H�Ԟx�v���b-�g���s[�_L���S�\>�B��P��m��g�I���`�_�Sujf�<}h��� +�{ ;��?��DO`3�{r~�~�՚/���I�c|��b�&D�_��O��WFj>!���"���Z�OPY��Q���P����Ė�������fc�~$�L�17�_�mb,8��2����9&z<�*��OV��`TV��<���%�60��-�1BY�g9�}Jm��L����ƈ:��z%�� �W��=�ͨ�Z`�p|^NJ����N��G9d}S��,#H�*� �e`�1�: �/��y/ ��y0e�D�_���2%��a��q�����P�c�����m�.���I���Q��������M��F��������D�|��]nd�O-u�3L��d�^8<�I������t^{a����#�U�Y��Ot����z���#���?�g"5��#�"~��(�0<�2|F�n��@ b;7j�j`�{�e����_OF�����M��%� C����l�(y�m�4�����p]�of`����/�.��MC ?m%2~�u]���ƅ��'`zYr��J�\G��qڪll���a�E��~�AH)����!��!��EC��_�����L*ʖb5bq���Y��o�]<>��Ez,�KlJ���,Q�E�͘�`���EZ��{��pz��y��Ƚ�'v�I�v_�Ƿ�'dW���̢�}�Rj��y!K#T���`����L�*Qƽ��Mi��-�yd�[��"��K�2ax����v� ?e5 �� �<,����i�'� F&[B<����/��@� ���v7����ΖiZ�M�� ��ʙ?w|��O=�|b_�Hs+?z�\?���T.�6�.V��z��H�.������<x����D�U���X�^�+��XR����:�;&��_X�*P�z�)�P�b(���͑ټ�E�L���eU��lz�sj���(��o:����Ci�-�ar�2����Ye%p��&"}ߢI.حGTN���.�A*vMv[:�� �xrJ��������=���W^ ��u:P8��U�+�a]�V����B �=��RO� �Q�/8��s�]X��c���ڎ3Zʦ���8��^�L��%��]o'�@!$���z����8�=�y�ڗ�3Ԑ~-.��{��|� ~w�/U����ͮf@�{���fBX�X�rGZ����!.��
Static task
static1
Behavioral task
behavioral1
Sample
f082f4fa56ffffc4bc45ab59abf74a0b_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
f082f4fa56ffffc4bc45ab59abf74a0b_JaffaCakes118
-
Size
2.1MB
-
MD5
f082f4fa56ffffc4bc45ab59abf74a0b
-
SHA1
abc38c1a3cd422c3157b54f6ef88cc8c64ac8dc4
-
SHA256
9f442aad7eedd1ce8880556d7d18356a4a9d68c2d11e7b394d31976acbd9a3ac
-
SHA512
666355ab1bd965ab33decbbdf3a34e29b71cd08f6a903d3c05bdad155005ceefc662c977cf4826120d951f5490c63a4912422e6e88de85b0577c1e08b2be7913
-
SSDEEP
49152:VHum/IciGkQ65lxIxyZ3jG3xsePa4pb/OIPxkor24:VHd/IVn5bWy1GwI924
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f082f4fa56ffffc4bc45ab59abf74a0b_JaffaCakes118
Files
-
f082f4fa56ffffc4bc45ab59abf74a0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 46KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE